Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Simplifying Seccomp enforcement in containerized or non-containerized apps
Go library for installing a seccomp BPF system call filter.
Record process launches and files read and written by each process
Docker Secure Computing Profile Generator
agent for handling seccomp descriptors for container runtimes
Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.
A command line tool to automatically generate seccomp profiles.
Advanced kernel-native observability and enforcement framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR
Go port of Heteronculous (ptrace-based proxy leak detector). Outreachy project. Currently undergoing a rewrite!
🛡️ auto-generate seccomp profiles for Kubernetes
Simple CLI wrapper for libseccomp library written in Go.
Add a description, image, and links to the seccomp topic page so that developers can more easily learn about it.
To associate your repository with the seccomp topic, visit your repo's landing page and select "manage topics."